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© A method of franking mail items (10) is disclosed 
in which the franking impression includes a machine 
readable portion (12) and a visually readable portion 
(11). The machine readable portion (12) comprises a 
data block including at least a postage charge and a 
pseudo-random number and the data block is en- 
crypted prior to printing. During printing of the fran- 
king impression, at least a part of the machine 
readable portion (12) is read (17) and compared with 
the data block intended to be printed. If the compari- 
son is satisfactory the printing operation is continued 
to print the visually readable portion (11). The 
pseudo-random number is changed for each franking 
transaction which may be each item or batch of 
items. The machine readable portion is read at a 
mail handling centre to provide an input to a postage 
charging and accounting function. 
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FRANKING SYSTEM 



This invention relates to a method of franking 
postai items by which postal, authorities are en- 
abled to account for charges relating to the han- 
dling of mail items and to obtain payment for such 
charges from the sender of the mail items. The s 
invention also relates to franking apparatus for car- 
rying out the method. 

Currently used postage payment systems for 
franking machines fall into two categories. In one 
category, in which the postage is prepaid, the w 
franking machine is constructed and operated to 
securely maintain a record of credit remaining 
available to a user of the machine and the machine 
is controlled to lock if and when the credit level 
decreases to a predetermined low value. Conse- is 
quently if this low credit level is reached and the 
machine locks, the machine is unable to be used 
for further franking until such time as payment has 
been received by the postal authority for additional 
credit and the new credit value has been entered in 20 
the machine. In the other category in which a post 
payment method is used, the meter is read periodi- 
cally and the user invoiced accordingly, use of the 
franking machine is constrained by controls which 
lock the machine when total postage value used 25 
exceeds a predetermined limit In both of these 
categories of system it is necessary for the fran- 
king machine to incorporate security measures to 
prevent fraudulent use of the machine. In order to 
maintain the integrity of the security complex, con- so 
trol systems are used in the internal operation of 
the machine and the franking machine is con- 
structed to be physically robust and is provided 
with sealing devices to prevent unauthorised ac- 
cess to the interior of the machine. In addition to 35 
the security maintained in the franking machine, 
the postal authorities operate an elaborate manual 
procedure for checking franked mail items which 
necessitates restriction of location at which franked 
mail can be posted by any sender. The main- 40 
tenance of security in the franking machine in- 
creases the cost of the franking machine and this 
together with restrictive posting procedures tends 
to limit the use of franking machines to those users 
which have a relatively large volume of postal us- as 
age. 

Broadly the invention relates to a system of 
franking mail items comprising printing franking 
data in machine readable form on said mail items 
by senders of said items, said franking data includ- so 
ing at least data relating to a postage charge for 
the item encoded in a secure manner to prevent 
unauthorised printing of said data relating to the 
postal charg and identification data; utilising a 
data reading device to read said imprinted franking 



data from the mail items at a postal authority 
location to provide data signals relating to each 
mail item; utilising said data signals to generate a 
transaction record for each of the franked items 
and utilising said transaction records to generate a 
billing account for each sender of franked mail 
items. 

According to one aspect of the invention a 
method of franking mail items comprises the steps 
of generating a pseudo-random number relating to 
a franking transaction; forming a data block con- 
taining at least said pseudo random number and 
data relating to a postal charge for said mail item; 
encrypting said data block; printing data represent- 
ing said encrypted data block together with iden- 
tification data in machine readable form on a mail 
item. 

Preferably a different pseudo random number 
is generated for each franking transaction. 

The franking data may be printed on the mail 
item in the form of a bar code consisting of spaced 
bar code marks of differing width. 

According to another aspect of the invention a 
method of franking mail items and accounting for 
postage value used comprises at a mail item fran- 
king location the steps of generating a pseudo- 
random number relating to a franking transaction; 
forming a data block containing at least said pseu- 
do random number and data relating to a postal 
charge for said mail item; utilising an encryption 
key unique to a franking machine to encrypt said 
data block; printing data representing said encryp- 
ted data block together with data identifying said 
franking machine in machine readable form on a 
mail item; and at a postal authority location the 
steps of machine reading said identification data 
and printed encrypted data block; selecting from a 
record of decryption keys a decryption key cor- 
responding to said identification data; utilising said 
selected decryption key to decrypt said encrypted 
data block read from the mail item; checking valid- 
ity of the pseudo-random number contained in said 
data block and if valid utilising the postage charge 
data as an accounting input to account for postage 
value used. 

Preferably a record of pseudo random num- 
bers used in relation to a franking machine iden- 
tification is maintained; a pseudo random number 
read from franking data of a current mail item is 
compared with the record of pseudo random num- 
bers; and the franked mail item is accepted for 
despatch to a destination address only if said pseu- 
do random number is valid. 

In accordance with yet another aspect of the 
invention franking apparatus includes means to 



• 



5NSDOCID: <EP 0331352A2 t > 



BNS Daae 2 



3 EP 0 331 



g en0ra te a pseudo random number for each fran- 
king transaction; means to form a data block by 
combining said pseudo random number with a 
postal value selected for franking a mail item; and 
printing means operable to print franking data in- 5 
eluding said data block in machine readable form 
on the mail item. 

Preferably the franking apparatus includes 
means operable in combination with a secure en- 
cryption key to encrypt said data block. *o 

Preferably the franking apparatus includes 
reading means operative to read said franking data 
printed in machine readable form on the mail item; 
and means operative to compare franking data 
intended to be printed with the franking data read 75 
by said reading device and to terminate franking in 
the event that the comparison means indicates an 
error in the printed franking data. 

The franking apparatus may include means op- 
erable to print a visually readable franking on the zo 
mail item only if the comparison means indicates 
that the printed franking data is free of error. 

A method of and apparatus for carrying out the 
invention will now be described by way of example 
with reference to the drawings in which:- 25 

Figure 1 shows a franking impression on a 
mail item 

Figure 2 is a flow diagram of the operation of 
a franking machine 

Figure 3 is a flow diagram of procedures 30 
carried out at a postal authority centre and 

Figure 4 is a block diagram of franking ap- 
paratus. 

Referring first to Figure 1 , a franking printed 35 
onto a mail item 10 comprises two parts indicated 
as 11 and 12. The part 11 consists of a typicaJ 
franking such as is applied by current franking 
machines to enable visual inspection of a mail item 
to ascertain that it has been correctly franked with 40 
a value of postage appropriate to the size or weight 
of the item, the destination of the item and the 
postal service such as surface mail or airmail re- 
quired by the sender. The franking consists of a 
predetermined pattern as governed by rules laid . 45 
down by the postal authority and usually includes 
not only the value of postage but also the date of 
franking and the licence number of the franking 
machine. At the time of printing the franking addi- 
tional information such as a slogan 13 may be so 
printed on the mail item alongside the franking. In 
addition the franking impression includes the por- 
tion 12 consisting of an impression in a coded form 
which can be read by machine. The coded impres- 
sion may take a number of forms, th form illus- ss 
trated consisting of a bar code in which data is 
represented in binary notation by spaced bars of 
one or other of two widths. In printing th franking, 
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it is usual for the mail item, an envelope in this 
present example, to be fed in a direction left to 
right as seen in Figure 1 in which the upper edge 

14 engages and is guided by a guide on the 
franking machine and the right hand edge 15 is the 
leading edge of the envelope. These edges 14 and 

15 of the mail item serve as datum edges for the 
positioning of the franking impression on the item. 
The bars of the bar code, in the portion 12 of the 
franking, extend transversely to the direction of 
feeding of the mail item and are spaced apart in 
the direction of feeding of the mail item. The por- 
tion 12 may consist of a single row of bars or 
where the quantity of data to be represented would 
require an unduly long row of bars, the data may 
be represented by bars arranged in a number of 
rows, for example two rows, as shown in Figure 1 . 
It will be appreciated that instead of printing di- 
rectly onto the envelope, the mail item on which 
printing is effected may comprise an adhesive label 
for subsequent application to an envelope or par- 
cel. Conveniently, the franking may be printed by a 
thermal print head 16 (Figure 4) which has a plural- 
ity of print elements disposed along a line extend- 
ing transversely to the direction of feeding of the 
mail item. The print elements are selectively ener- 
gised in synchronism with the feeding of the mail 
item in such a manner as to achieve printing of the 
required franking impression. Since the portion 12 
consisting of coded data is required to be read by 
machine it is desirable to check the printing of the 
bar code by a reading device 17 positioned up- 
stream and immediately adjacent the print head. 
The data represented by the bar code in the por- 
tion 12 of the franking impression includes date of 
franking, postage value and franking machine iden- 
tification which conveniently may be the licence 
number of the franking machine. In addition it is 
preferred to include the despatch postal area code 
and the destination postal code. In order to ensure 
that the data, particularly that relating to the post- 
age value, is valid and is secure from attempts to 
fraudulently print or tamper with that data, the data 
is formed into a secure code or data block. This is 
effected by causing the jT^king mac^hine to ^.gen- 
erate a pseudo random number and to combine 
ffiis" with!" "at least" the postal value to form a data 
block. This data block is then encrypted using a 
secure encryption key held in non-volatile memory 
in the franking machine. The licence number of the 
franking machine and the despatch and destination 
areas codes are combined with the secure data 
block after encryption. The pseudo random num- 
bers are generated in a sequence so that succes- 
sive numbers of the sequence are used for each 
franking transaction. A franking transaction may 
comprise franking of an individual mail item or may 
comprise franking of all mail items during a pre- 
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determined time period, for example one day. 
Thus, in the latter instance, the pseudo random 
number is reset for each day and this may be 
effected by an algorithm triggered by resetting the 
date in the franking machine. Thus the data block 
fgc each franking transaction is unique. As will be 
seen from Figure 4, the franking machine includes 
electronic circuits 18 operable to control operation 
of the print head 16 and to receive output signals 
from the reading device 17. Non-volatile memory 
19 is provided to store the licence number of the 
franking machine and any other data which may be 
required in the operation of the machine. The cir- 
cuits 18 are operable under the control of software 
programs to generate .pseudo j^nd^ in 
sequence and to form a data block by combining a 
postage charge value input on a keyboard 20, or 
from another source, and to utilise an encryption 
key held in a secure location of memory 19 to 
encrypt the data block and then carry out a printing 
operation in which franking data including the en- 
. crypted data block is printed in the form of a bar 
code on the mail item fed past the print head 16. 

Figure 2 illustrates steps in the franking ma- 
chine operation from which it will be seen that after 
encryption of the data block, the portion 12 of the 
franking impression is printed and, immediately 
thereafter, is read by the reading device. The out- 
put of the reading device is compared with the data 
block intended to be printed. If the comparison 
indicates that the printed bar code correctly repre- 
sents the data block, the operation of the franking 
machine continues so as to print the visually reada- 
ble portion 1 1 of the franking impression and the 
mail item 10 bearing a complete franking impres- 
sion 11,12 and. where desired, a slogan or the like 
13 is fed from the franking machine. However if the 
comparison indicates that the data block is not 
correctly represented by the printing, printing of 
the remainder of the franking impression is termi- 
nated and a fault message is displayed on the 
franking machine. The output of the reading device 
in respect of the whole of the portion 12 of the 
franking impression may be compared with the 
whole of the data block intended to be printed. 
However the processing of the data in the compari- 
son operation may take a length of time such that a 
pause would be required before continuing after a 
correct comparison to print the visually readable 
portion 11 of the franking impression. In order to 
enable the printing of the entire franking impression 
to be continuous and uninterrupted, the comparison 
may be carried out on a probability basis and be in 
respect of only a leading part of the portion 12 of 
the franking impression. If a comparison in respect 
of this part of the portion 12 indicates that this part 
is correct, a decision would be made to continue 
printing and the visually readable portion would be 



printed immediately following printing of the ma- 
chine readable portion in a continuous printing op- 
eration. While such a partial comparison would not 
check the entire portion 12, on a probability basis, 

s if this part has been correctly printed by the print- 
ing device, the printing device will continue to 
function correctly to print the remainder of the 
portion 12 and the partial comparison will provide 
an adequate and sufficient check of the printing. 

w The postage value and destination code are 

Input to the franking machine by the user, or from 
another station in a mailing system of which the 
franking machine is a part. The date of franking 
may be set automatically from a clock device in 
is the franking machine and the licence number is 
read from a iocation of non-volatile memory where 
it is stored. 

The licence numbers and corresponding users 
secure encryption keys are held in a data base 
20 accessible by mail handling apparatus at a postal 
authority location. Referring to Figure 3, when the 
franked mail item 10 is received at the postal 
authority location, it is fed into an automatic mail 
handling apparatus. The apparatus includes a suit- 
25 able code reader for reading the bar code of the 
portion 12 of the franking impression. Upon reading 
the licence number from the portion 12 of the 
franking impression, the data base is accessed to 
obtain the secure encryption key associated with 
30 that licence number and the key is utilised to 
decrypt the secure data block represented by the 
bar code of portion 12 of the franking impression. 
Validation checks are carried out on the data within 
the block to check validity of the data. The validity 
as checks include a check to ensure that the data 
read from the secure block is error free, a check on 
the pseudo random number to ensure that it is a 
valid current pseudo random number, a check that 
the licence number of the machine relates to a 
40 current account with the postal authority and a 
check that the date and value of franking have 
allowable values, if the validation checks indicate 
that the coded franking impression is valid and 
acceptable by the postal authority the mail Item is 
46 fed for sorting and handling in the usual manner. If 
the portion 12 of the franking impression includes 
destination data for the mail item, reading of this 
destination data by the code reader may be utilised 
to control mechanical sorting apparatus to direct 
so the mail item to an appropriate destination area bin. 
In the event that either the reading of the code 
portion 12 indicates a faulty reading of the data or 
the validity check on data in the secure data block 
indicates that the data is not valid, the mail item is 
55 directed to a station where a manual check of the 
franking impression can be effected. If, from the „. 
manual check, the franking impression is judged to 
be valid the franking and destination details are 
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entered manually at a keyboard terminal and the 
item is re-introduced into the mechanical handling 
system. On the other hand, if it appears that the 
franking impression is invalid and possibly results 
from an attempted fraudulent action, the mail item 
may be passed to a supervisor for attention. The 
franking data read from the* portion 12 of the fran- 
king impression and after decryption of the secure 
data block, together with similar franking data en- 
tered manually on the keyboard terminal is utilised 
to enter the postal charge for the mail item as a 
transaction on a computerised accounting system. 
Billing of users of the franking machines may be 
effected from the accounting system and in addi- 
tion reports concerning usage of the mail handling 
system may be produced for management and 
other purposes. 



Claims 

1. A method of franking mail items charac- 
terised by the steps of generating a pseudo-ran- 
dom number relating to a franking transaction; for- 
ming a data block containing at least said pseudo 
random number and data relating to a postal 
charge for said mail item; encrypting said data 
block; printing data (12) representing said encryp- 
ted data block together with identification data in 
machine readable form on a mail item (10). 

2. A method as claimed in claim 1 further 
characterised by the steps of machine reading said 
printed data (12) from said mail item (10); compar- 
ing information obtained from reading said printed 
data block with information contained in said data 
block and in response to identity therebetween 
printing a visually readable franking impression (11) 
including at least a postage charge on the mail 
item. 

3. A method as claimed in claim 2 further 
characterised in that the step of comparing is effec- 
ted in respect of only a part of the information 
obtained from reading said printed data block (12). 

4. A method as claimed in claim 2 further 
characterised in that the step of comparing is effec- 
ted in respect of the whole of the information 
obtained from reading said printed data block (12). 

5. A method as claimed in any preceding claim 
further characterised by the step of generating for 
each of a series of franking transactions respec* 
tively a next pseudo-random number of a series of 
pseudo-random numbers. 

6. A method as claimed in claim 5 further 
characterised in that a franking transaction com- 
prises franking of a single mail item (10) and 
wherein the next pseudo-random number of the 
series is generated for the franking of each succes- 
sive mail item. 



7. A method as claimed in claim 5 further 
characterised in that a franking transaction com- 
prises franking of a batch comprising a plurality of 
mail items (10) and wherein the next pseudo-ran- 

s dom number of the series is generated for the 
franking of a first mail item of each successive 
batch of mail items. 

8. A method as claimed in claim 7 further 
characterised by the steps of registering a current 

io date and generating the next pseudo-random num- 
ber of the series in response to change in the 
registered date. 

9. A method of franking mail items and ac- 
counting for postage value used characterised by, 

75 at a mail item franking location, the steps of gen- 
erating a pseudo-random number relating to a fran- 
king transaction; forming a data block containing at 
least said pseudo random number and data relating 
to a postal charge for said mail item; utilising an 

20 encryption key unique to a franking machin to 
encrypt said data block; printing data representing 
said encrypted data block together with data iden- 
tifying said franking machine in machine readable 
form (12) on a mail item (10); and, at a postal 

25 authority location, the steps of machine reading 
said identification data and printed encrypted data 
block (12); selecting from a record of decryption 
keys a decryption key corresponding to said iden- 
tification data; utilising said selected decryption key 

30 to decrypt said encrypted data block read from the 
mail item (10); checking validity of the pseudo- 
random number contained in said data block and if 
valid utilising the postage charge data as an ac- 
counting input to account for postage value used. 

35 10. A method as claimed in claim 9 further 

characterised by the step, at the postal authority 
location, of maintaining a record of pseudo-random 
numbers used in franking mail items (10) at the 
franking location corresponding to the identification 

40 data; and comparing the pseudo-random number 
from the data block read from the mail item with 
pseudo-random numbers already used at that fran- 
king location and accepting the mail item as validly 
franked if the pseudo-random number has not been 

45 used. 

11. A method of franking a mail item charac- 
terised by the steps of generating a different 
pseudo-random number for each franking transac- 
tion; printing on the mail item (1 0) franking data in 

so machine readable form (12), said franking data 
Including a data block containing data relating to a 
postal charge for said item and the pseudo-random 
number applicable to that mail item, said data 
block being encrypted prior to printing on the mail 

55 item. 

12. A method of handling a mail item franked 
by a method as claimed in any preceding claim 
characterised by the steps of utilising a reading 
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device (17) to read the franking data (12) printed 
on the mail item (10)in machine readable form; 
maintaining a record of pseudo random numbers 
used in relation to a franking machine identification; 
comparing a pseudo random number read from s 
franking data of a current mail item with the record 
of pseudo random numbers; accepting the franked 
mail item for despatch to a destination address 
only if said pseudo random number is not included 
in said record and adding the pseudo-random num- w 
ber of the franking data of the current item to said 
record of pseudo-random numbers. 

13. Franking apparatus characterised by means 
(18) to generate a pseudo random number for each 
franking transaction; means (18) to form a data 75 
block by combining said pseudo random number 
with a postal value selected for franking a mail 
item; and printing means (16) operable to print 
franking data including said data block in machine 
readable form (12) on the mail item (10). 20 

14. Franking apparatus as claimed in claim 13 
further characterised by means (18) operable in 
combination with a secure encryption key to en- 
crypt said data block prior to printing on the mail 
item (10). 25 

15. Franking apparatus as claimed in claim 13 
or 14 further characterised by reading means (17) 
operative to read said franking data printed in ma- 
chine readable form (12) on the mail item (10); and 
means (18) operative to compare franking data 30 
intended to be printed with the franking data read 

by said reading device (17) and to terminate fran- 
king in the event that the comparison indicates an 
error in the printed franking data. 

16. Franking apparatus as claimed in claim 15 35 
further characterised in that the printing means (16) 

is operative to print visually readable franking (11) 
on the mail item (10) only if the comparison in- 
dicates that the printed franking data (12) is free of 
error. 40 

17. Franking apparatus as claimed in claim 16 
further characterised in that the printing means (16) 
is operative to print a visually readable franking 
(11) including at least a visually readable postage 
value. 45 
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